This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233342e302f32332d3234203d3e203532343638.roa
File: 34352e3232382e3233342e302f32332d3234203d3e203532343638.roa (raw, json)
Hash identifier: wzy5CrR/u2qicY4RLq7ax1iuqmZEqLgagy3pDgsd2Js=
Subject key identifier: B6:B9:F6:A7:F2:5B:7D:A0:24:06:34:66:96:EF:17:75:E8:79:16:C3
Certificate issuer: /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial: 279A4B19F504F7BE14D61E254B7BABC31AEA94A8
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233342e302f32332d3234203d3e203532343638.roa
Signing time: Mon 17 Nov 2025 18:55:00 +0000
ROA not before: Mon 17 Nov 2025 18:50:00 +0000
ROA not after: Mon 16 Nov 2026 18:55:00 +0000
asID: 52468
IP address blocks: 45.228.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl
rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 09:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:9a:4b:19:f5:04:f7:be:14:d6:1e:25:4b:7b:ab:c3:1a:ea:94:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Validity
Not Before: Nov 17 18:50:00 2025 GMT
Not After : Nov 16 18:55:00 2026 GMT
Subject: CN=B6B9F6A7F25B7DA02406346696EF1775E87916C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:4f:49:71:08:14:30:45:9c:bc:c1:07:e0:
91:6c:fb:81:d5:ec:da:b6:83:a3:f9:2d:d6:90:69:
39:b6:c4:e5:ef:ab:0e:8a:7f:65:41:06:5b:4d:d1:
6a:74:fb:1b:ba:71:32:40:ff:5e:89:ea:bb:65:17:
2e:86:34:11:bc:28:60:2c:3d:59:36:29:1d:23:6b:
d3:46:80:b8:61:c3:56:81:4d:86:4a:7c:9c:7f:65:
8a:e2:40:47:a8:f5:be:a2:6e:07:94:c1:4c:c4:58:
0f:15:27:b4:64:fa:97:0e:b5:8f:98:13:b5:40:03:
e1:39:e8:89:5c:ed:ec:22:83:a5:63:0a:7e:b5:77:
84:0d:c2:0f:80:53:8c:0a:c0:b5:d8:ba:9e:10:0f:
1a:1b:c0:ef:66:88:6e:42:ba:2e:33:5e:f3:a9:eb:
1f:c6:08:d1:01:b8:02:fd:03:1b:5b:50:39:5b:6d:
94:43:b0:9d:46:b5:30:aa:fd:0f:23:3c:01:33:32:
f6:4a:d7:20:6f:be:2e:31:95:5d:c4:05:43:56:35:
59:41:c4:d0:5a:b9:6d:98:4d:e0:64:32:41:35:03:
3c:a8:12:dc:ce:f6:94:9a:68:a3:8b:66:16:47:53:
bd:90:8d:b8:89:b1:2a:45:08:45:e6:87:2e:b9:63:
6b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B9:F6:A7:F2:5B:7D:A0:24:06:34:66:96:EF:17:75:E8:79:16:C3
X509v3 Authority Key Identifier:
keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233342e302f32332d3234203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.234.0/23
Signature Algorithm: sha256WithRSAEncryption
11:39:13:c1:46:97:6b:f3:0b:6b:9a:4e:6f:53:2e:b2:32:c5:
31:7e:8e:04:de:66:b5:29:29:3d:73:17:b6:e1:f5:35:44:56:
9e:97:8d:48:24:e0:e7:7a:0c:d4:51:1a:bb:41:f6:f3:f9:0f:
28:1f:85:5b:95:f4:85:d6:7c:47:89:1d:b8:03:28:71:a4:b2:
40:4a:d2:a6:c8:59:36:ae:40:0c:58:78:4b:3f:4d:fb:c1:51:
bb:6c:d8:a4:f1:4f:63:c2:f1:60:2d:74:ad:5a:a7:9a:81:d6:
d9:de:45:30:77:19:c1:f6:34:1e:5d:ab:67:12:20:0d:c7:36:
52:0a:5b:1b:90:7d:1d:89:6e:4e:ff:0b:4f:f7:6d:1c:09:e2:
5b:b7:43:2c:b6:a1:3e:3e:9d:1b:ac:6e:fe:e5:a3:03:6e:92:
85:6d:4c:be:6e:7f:08:e4:09:b2:41:ad:ec:b9:dd:a9:14:0d:
1a:78:a1:48:25:bb:08:a2:98:c0:ec:7a:c7:f5:63:36:44:36:
bf:e7:60:20:3c:2e:35:1a:be:7c:f8:a1:21:92:3f:29:ad:ce:
4d:db:53:20:af:c2:9b:b2:1d:ce:7d:c6:40:6f:b3:cf:6a:0a:
0d:6e:1d:fe:a1:5d:87:ba:1c:53:58:0d:cb:b8:f2:2e:7e:6c:
35:05:45:1a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJ5pLGfUE974U1h4lS3urwxrqlKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA0RTYyRjQyRThDNzU0MTMyQzQxMzc1MjE4NzNDRkNF
M0MyQkI0ODAeFw0yNTExMTcxODUwMDBaFw0yNjExMTYxODU1MDBaMDMxMTAvBgNV
BAMTKEI2QjlGNkE3RjI1QjdEQTAyNDA2MzQ2Njk2RUYxNzc1RTg3OTE2QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwIk9JcQgUMEWcvMEH4JFs+4HV
7Nq2g6P5LdaQaTm2xOXvqw6Kf2VBBltN0Wp0+xu6cTJA/16J6rtlFy6GNBG8KGAs
PVk2KR0ja9NGgLhhw1aBTYZKfJx/ZYriQEeo9b6ibgeUwUzEWA8VJ7Rk+pcOtY+Y
E7VAA+E56Ilc7ewig6VjCn61d4QNwg+AU4wKwLXYup4QDxobwO9miG5Cui4zXvOp
6x/GCNEBuAL9AxtbUDlbbZRDsJ1GtTCq/Q8jPAEzMvZK1yBvvi4xlV3EBUNWNVlB
xNBauW2YTeBkMkE1AzyoEtzO9pSaaKOLZhZHU72QjbiJsSpFCEXmhy65Y2tNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUtrn2p/JbfaAkBjRmlu8Xdeh5FsMwHwYDVR0j
BBgwFoAU8E5i9C6MdUEyxBN1IYc8/OPCu0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85REQwOEI1NDU4M0U0MkI0Nzc2MkE0QTlCQjA0MjMyOTAx
N0ZEQjQ0NTRFQzExNDNBN0E2MjU1RDNBOTdFQjM2LzAvRjA0RTYyRjQyRThDNzU0
MTMyQzQxMzc1MjE4NzNDRkNFM0MyQkI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMDRFNjJGNDJFOEM3NTQxMzJD
NDEzNzUyMTg3M0NGQ0UzQzJCQjQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUREMDhCNTQ1ODNFNDJCNDc3NjJBNEE5QkIwNDIzMjkwMTdGREI0NDU0
RUMxMTQzQTdBNjI1NUQzQTk3RUIzNi8wLzM0MzUyZTMyMzIzODJlMzIzMzM0MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3k6jAN
BgkqhkiG9w0BAQsFAAOCAQEAETkTwUaXa/MLa5pOb1MusjLFMX6OBN5mtSkpPXMX
tuH1NURWnpeNSCTg53oM1FEau0H28/kPKB+FW5X0hdZ8R4kduAMocaSyQErSpshZ
Nq5ADFh4Sz9N+8FRu2zYpPFPY8LxYC10rVqnmoHW2d5FMHcZwfY0Hl2rZxIgDcc2
UgpbG5B9HYluTv8LT/dtHAniW7dDLLahPj6dG6xu/uWjA26ShW1Mvm5/COQJskGt
7LndqRQNGnihSCW7CKKYwOx6x/VjNkQ2v+dgIDwuNRq+fPihIZI/Ka3OTdtTIK/C
m7Idzn3GQG+zz2oKDW4d/qFdh7ocU1gNy7jyLn5sNQVFGg==
-----END CERTIFICATE-----
Generated at Wed Dec 3 08:31:03 2025 by rpki-client